SIEM Engineer

About the role

AMGEN's Capability Center Portugal in Lisbon is looking for a SIEM Engineer to help build and run its security monitoring strategy, protecting data, systems and networks against threats. The role works closely with IT teams to embed security monitoring across the technology stack, with the aim of safeguarding patient data and systems.

Key responsibilities

• Configure and maintain SIEM and Security Data Lake (SDL) components, including log collection, ingestion, parsing and normalization
• Monitor the health and performance of SIEM and SDL components, troubleshoot issues, document findings and escalate complex problems
• Implement and test log source integrations and configuration changes according to technical requirements and approved procedures
• Validate log data quality and tune detection rules, dashboards and reports
• Support incident investigations and operational coordination by providing SIEM data and working with source owners or support teams
• Maintain documentation, support audits and recommend improvements to procedures, configurations and monitoring

Required profile

• Master's degree with 1-2 years of experience, or Bachelor's degree with 2-3 years, or Diploma with 3-4 years in Information Systems or a related field
• Proven understanding of common security monitoring and detection engineering practices
• In-depth knowledge of cybersecurity frameworks, technologies and best practices
• Strong knowledge of security architecture frameworks and principles
• Preferred: GCDA, GSEC, CompTIA Security+ or CISSP certification

Required skills

• Preferred: log collection tools such as Splunk Universal Forwarder, Fluentd, Cribl
• Preferred: SIEM solutions such as QRadar, Elastic, ArcSight, Sentinel
• Preferred: Security Data Lake solutions such as Snowflake-based or AWS-based ones
• Preferred: network security, endpoint protection and incident response
• Preferred: scripting and automation (Python, Bash)
• Preferred: cloud-hosted infrastructure, AI agents and API integration

What we offer

• Hybrid work model between the Lisbon office and remote work
• Access to certifications, training, mentorship and career mobility
• Total rewards plan covering healthcare, finance and well-being